This Scammer is a Boomerang

IP blocking is not enough, because one can easily switch IP addresses. (via proxy/VPN)

You should deploy recaptcha and set its probability target to very high (0.8 to 0.9) – this will filter out bots. You can deploy recaptcha all forms: registration, comments, contact forms, login form, registration form…
Also use AKISMET to filter spam in case he still goes through – on all comment forms and contacts forms.

I’m afraid you won’t be able to block registration attempts completely as some bots can pass recaptcha. Instead you should restrict his abilities after he is registered.
Oh, and don’t forget to protect your admin page likewise.

Thank you
I’ll try this ??

Hi @babaorum, and thanks @oliverkardos for your assistance here.

It’s always good to check your Brute Force and Rate Limiting settings to make sure block lengths are long enough to stop persistent attacks retrying too soon, but you shouldn’t need to employ a manual IP blocking regime as this can be time-consuming from your side.

However, you do discuss country blocking which is a premium feature so if you are a Premium Wordfence Customer, I recommend opening support tickets at https://support.wordfence.com. They will be able to assist you faster and more efficiently.

Thanks,

Peter.